Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5D4D209030ED11EE9A24D25BC4F9AE02.roa
File:                     5D4D209030ED11EE9A24D25BC4F9AE02.roa (raw, json)
Hash identifier:          QSpwPec5QFUhau2pItalY7tqUazu5hv6fWL/eUQ+KIA=
Subject key identifier:   D2:D5:CB:A9:E8:2E:DC:41:D5:29:A4:F2:2F:66:F1:C3:FF:8F:EE:E3
Certificate issuer:       /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
Certificate serial:       33
Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5D4D209030ED11EE9A24D25BC4F9AE02.roa
Signing time:             Fri 27 Oct 2023 05:57:36 +0000
ROA not before:           Fri 27 Oct 2023 05:57:36 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     133752
IP address blocks:        103.133.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl
                          rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 06:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D
        Validity
            Not Before: Oct 27 05:57:36 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=653b5150-8ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:7b:50:ec:24:ae:25:be:5f:e0:48:d0:b1:
                    a8:9e:c3:c3:ab:41:a0:4e:9a:f7:ca:0f:f9:5f:f5:
                    8a:a1:47:36:50:47:88:0c:72:0d:9d:46:86:ce:98:
                    1d:6f:e9:1e:d6:8b:97:3a:61:5c:59:97:60:ac:ce:
                    ad:b8:b0:61:b5:95:1d:25:38:cd:6f:9e:95:b0:df:
                    ee:a2:88:f7:63:4f:f8:ef:1d:d4:c0:d0:83:de:08:
                    a0:c2:35:1f:30:4f:5b:30:4c:d6:e6:b7:f8:45:78:
                    18:ce:77:bb:f3:74:36:1a:8d:03:4e:dc:13:60:72:
                    dd:01:bd:8e:51:cd:f7:0f:8b:a0:8d:fc:20:89:5d:
                    ce:c0:70:5d:8e:f2:96:75:32:59:a2:24:3b:52:67:
                    34:40:7e:47:f4:42:77:ef:c7:46:46:5b:16:ef:1f:
                    de:e3:9f:82:f7:3b:8c:2d:62:3e:89:85:b6:38:c6:
                    72:2c:e4:9d:7e:d8:84:01:af:ee:b1:e5:85:51:cc:
                    a6:1e:7f:30:87:62:85:b8:03:8d:34:65:4a:18:c8:
                    a7:a2:d3:3d:d1:94:f5:a9:f1:dd:d3:5c:a2:81:47:
                    85:9d:16:78:06:87:5e:15:28:f8:a2:a9:f5:5b:8a:
                    fe:02:ea:9b:af:d6:da:8b:80:34:37:5d:de:4e:9a:
                    82:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D5:CB:A9:E8:2E:DC:41:D5:29:A4:F2:2F:66:F1:C3:FF:8F:EE:E3
            X509v3 Authority Key Identifier:
                keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/5D4D209030ED11EE9A24D25BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d7:09:2b:a1:40:e2:04:1d:72:bd:a6:23:8a:28:b0:71:c8:
         e4:03:29:19:48:01:61:41:47:23:85:a6:b3:ab:d3:6d:0f:96:
         e5:b3:66:16:55:2b:ba:e2:1c:a1:f6:55:37:0e:8a:a7:e5:db:
         0a:48:48:4e:6d:aa:64:4a:57:51:bd:68:4f:99:7f:6c:b9:50:
         9f:4c:15:f3:2a:27:bf:38:08:04:74:17:d1:22:c9:36:c9:c7:
         8b:ea:9a:ca:b3:74:4f:ef:a4:60:67:4e:8e:5e:8e:11:8f:51:
         09:37:e1:ca:fa:53:4e:2b:e8:01:d1:4e:74:88:dc:56:1c:07:
         25:e2:e0:54:96:88:a7:a4:41:bc:c6:2d:7e:f7:16:33:ec:55:
         ed:0d:59:1b:a1:2f:4b:df:61:fd:66:1c:3c:3b:f2:42:91:f7:
         2a:b5:1e:e4:99:8f:98:84:f8:c8:a5:46:dd:59:48:8b:08:11:
         76:f7:f7:2e:7e:24:f4:26:9b:2a:40:b6:0d:39:8a:3b:e5:1c:
         a3:e2:e7:54:61:e2:49:76:60:9f:38:ba:49:0a:ea:b0:ef:db:
         a5:8f:c3:d1:9b:04:31:d8:17:a2:1a:18:15:37:6d:69:21:48:
         17:3c:f1:a0:5f:cc:12:26:33:b1:67:e2:9e:40:95:fb:fd:e8:
         c8:6c:30:e7
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NkFCQzExMC8GA1UEBRMoNTc0OTg1RTI2RDhDNzcxNkIwOUVENTAzMTlCNENFNjQ5
NjFERTcwRDAeFw0yMzEwMjcwNTU3MzZaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1M2I1MTUwLThmZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHGntQ7CSuJb5f4EjQsaiew8OrQaBOmvfKD/lf9YqhRzZQR4gMcg2dRobOmB1v
6R7Wi5c6YVxZl2Cszq24sGG1lR0lOM1vnpWw3+6iiPdjT/jvHdTA0IPeCKDCNR8w
T1swTNbmt/hFeBjOd7vzdDYajQNO3BNgct0BvY5RzfcPi6CN/CCJXc7AcF2O8pZ1
MlmiJDtSZzRAfkf0Qnfvx0ZGWxbvH97jn4L3O4wtYj6JhbY4xnIs5J1+2IQBr+6x
5YVRzKYefzCHYoW4A400ZUoYyKei0z3RlPWp8d3TXKKBR4WdFngGh14VKPiiqfVb
iv4C6puv1tqLgDQ3Xd5OmoKDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU0tXLqegu
3EHVKaTyL2bxw/+P7uMwHwYDVR0jBBgwFoAUV0mF4m2MdxawntUDGbTOZJYd5w0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QUJDL0YwRTc5ODdDMzBF
QzExRUU5ODBFQjI0N0M0RjlBRTAyL1YwbUY0bTJNZHhhd250VURHYlRPWkpZZDV3
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVjBtRjRtMk1keGF3bnRVREdiVE9aSllkNXcwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkFCQy9GMEU3OTg3QzMwRUMxMUVFOTgwRUIyNDdDNEY5QUUwMi81RDREMjA5MDMw
RUQxMUVFOUEyNEQyNUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGeFvjANBgkqhkiG9w0BAQsFAAOCAQEAXdcJK6FA4gQdcr2m
I4oosHHI5AMpGUgBYUFHI4Wms6vTbQ+W5bNmFlUruuIcofZVNw6Kp+XbCkhITm2q
ZEpXUb1oT5l/bLlQn0wV8yonvzgIBHQX0SLJNsnHi+qayrN0T++kYGdOjl6OEY9R
CTfhyvpTTivoAdFOdIjcVhwHJeLgVJaIp6RBvMYtfvcWM+xV7Q1ZG6EvS99h/WYc
PDvyQpH3KrUe5JmPmIT4yKVG3VlIiwgRdvf3Ln4k9CabKkC2DTmKO+Uco+LnVGHi
SXZgnzi6SQrqsO/bpY/D0ZsEMdgXohoYFTdtaSFIFzzxoF/MEiYzsWfinkCV+/3o
yGww5w==
-----END CERTIFICATE-----
Generated at Wed May 1 08:05:03 2024 by rpki-client on console-ams.rpki-client.org